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thp nmri pherment of the_ m^S^SS&^SS. 

Rarely does a thro* for great stales win, but when it docs ttft laborious 
effort of ,«ny years has not been in vain. One of the peculiar things about 
the art and science of cryptanalysis is that cne can never predict in advance 
whetter there will be success. Often it is extremely depressing to sit 
before mouses i WWWflft of enciphered messages, to have to arrange 
and log t)e* by systems, categories, and other characteristics and still 
not be d>le to raise the veil of secrecy a single time for oven a few 
minutes. 

If to consider how much expenditure of labor and money is required 
simply to assure the interception, wi*th as few gaps as possible, of all the 
messages tfiich a country of the size of the U.S.A. sends out into the aether 
daily, then it sometimes seems doubtflil to every serious worker and specialist 
whether such an employment of workers 5s justified at tires when every single 
man is needed. 

If it is once possible to score one slight advance, horaver, it is 
rare that another proves impossible. The scientific research man feels 
soce satisfaction, 'vis collaborators - vho have often worked for months or 
even for years with monotonous, dead letters or digits, compiled statistics, 
drawn curves, and made computations - they receive a new incentive . 

t&en from the lifeless numbers and symbols single words and sentences 

develop, which in the beginning still look awkward and without connection 

and present a remarkable puzzle, it 3a still by no means clear whether 

the information is useful at all. It may be that these messages contain 

merely the transfer of combat engineer Snith or of grenadier Miller and 

report how much baggage he is taking along And whether he is goin; on a 

mission or returning from leave. No doubt these reports are without 

inter o st for tie hi#i command and yet a harmless message ray become a 

trmire trove for further investigation. 

Sometimes - but only rarely - fortairE aor»M n ii« • LJ _« 

J " -■- -• "^racially gracious and then 

a successful throw comes at the ri^ht monant. 
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The GerJtan 



intercept and wyptanalytlc. service wo*ed in collaboration 



,ith several countries . Mention of this fact hfcs been made in several 
preview reports. It was mainly with Italy, Hungry, and Finland tl* 
a close cooperation existed. The cooperation of these -sister offices" in 
the leagued countries was not always esteemed very hi#3y. Some worked 
honesty, hut without proper means and proper leadership, to accorplish 
something worth while; others accomplished marvelous things and sometimes 
put the German cryptanalytic service to shame. 

Those less successful in the scientific v ork often possessed other 
*>od oialities. So it was in the late summer of 1%1 when one day at 
the Tirpitzufer in Berlin, whore the central office of the German crypt- 
analytic service was located, a whole package of high ly important material 
was laid on the table. The messenger smiled in friendly fashion and 
gave no response to questions as to "how" and "from where," but did add: 
"^fe've had luck". 

The type of material, in particular the completeness of the codes, 
betrayed, however, that they had not been put together by years of detailed 
..ork. Pajjer and print showed that the photographic lens combined with the 
slyness and cunning of its owner coild do the Job more quickly than the 
scientific worker. 

The goal, however, has rot always been reached when a code is at hand. 
The further development and refinement of cryptographic methods has led 
to the use of additional security measures in order to prevent unauthorized 
reading, even in case the code falls into the hands of the enemy* 

The favorite American system v/as enciphement by means of substitution 
tables. These have to be as complicated as possible, - the security is 
so much greater. Ch the other hand, they must not be too complicated to 
use so that the authorized code clerk can :..ake use of them v.ithout making 
mistakes, '."hen the process of encipherment makes too great derunde on the 
cryptogram ic personnel, sources of error easily result. These are apt to 
delay the transmission of information because questions have to be sent 
back. In many casus the messages even have to be repeat od. The content 
must remain the same bj^^e form ^^J^^^J** be cha ^' G(1 » ^ the 
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instructions say. 

If the authorized code clerk does not exercise tWe necessary precautions, 
a weak point results and hence an opportunity for the enemy to break into 
the system. 

Practical work during the war showed that the American cryptographic 
personnel v&s often guilty of such ctrelessness and so facilitated the 
work of the fJarran cryptanalytic service; sometimes this was the only thing 
which made success possible. 

It must be stated- however, that the discipline of the nnerieans 
improved materially in the last two years of the war and that breaches of 
discipline wore observed more rarely. 

For each code a limited period of validity is intendedo Any frequent 
change is out of the cuestion because the production of such an extensive 
work calls for very much tine and expense. Difficulties of transportation 
and the risk of theft, even in a courier's baggage, on the way across enemy 
territory or across neutral states also come into account. 

It often happened that individual offices were not able to read the 
enciphered messages because they were iot in possession of the valid means 
of enciphering and deciphering. Although the receipt of new cipher material 
had to be reported immediately to the Departeawit of State or the Vfer Depart- 
ment and, consequently, Washington must be informed, such mistakes were made 
there frequently. Then repetitions were necessary in a codo, or according 
to some other cryptographic system. If these were not done carefully, i.e., 
by clever alterations of the text, they yielded welcon* points of attack 
for the Germn cryptanalytic service. 

On the other hand, the Gornan crypt analytic service in this way often 
cai* into the possession of reports cone days before the American offices 
ft* which they were intended but by vhich they could not be read. 

Less important errors in enciphers t were often recognized by the 
German cryptanalytic service so that even such messages coxld b e deciphered 
relatively little effort while the clerk in Ankara or Teneriffe had to 
radio to \ashington one appeal for help after the other. 

top Secret 



TOP SECRET 



If the frwracfc replays* «£ a cote or warn cUwr ci7;*ogm;fci* 
^ ^ *rr*v.u, -* — — ' * 

artrttofa*^ tfce jwlodof tfc^ralidttty. & «e «y tl» • ***** *t 

•ei'.sL *lLr.*. '---^ ~ -g- v - ^ v.-:--- - v. - - - 
fey. 

_^ - _ ^ 5 „- ^ , *• 

iljjiwi JIi «y it i «i » i- c, the ot^o^iiw «f the SbAa Deptrtinrf. 



_ 1 i -n L'i-l a-c t i^v- *-e othct * »« the T^illlpri € 

v * _ii ' -.: ve - 

iw wri, itir frrrr ft~r i *■ * **~ lfc* cofe m 

«toiire (*« 3CCO ^ The fifth ili Mt of a grasp ratki 
- v— . v%t ■ :f -.iilt; -e:v. - — ; -."V.*. 

r - — ■ - v. : i . ^ . . - . - - - - : - .- - v - . 



TOP SECRET 



TOP SECRET 



y,ith the "intelligence Code" ten substitute *bles ^ us*d. which, 

t*en t„o and to* *** W *«— *> - an ° thOT - CalSOnant! ' 
replaced by consonants and MriM by v^ols; each contained different 

substitute* letter for a total of four groups, «hi* «ere enciphered in 
noma sequence after tto n«nner of a polyalphabetic substitute* . 

Tte use of the first substitute* table empl^ed in the message vas 
shoim I* *e "Cipher Indicator," «hich vas pJaced behind the date group 

and sent in dear* 

Then, enciphement with this table continued in the manner $mt 
described taking four groups at a tine, i. e., in phases, until a new "C: 
Indicator" appeared which announced the use of a new substitution table. 

The use of the fourth group in a phase, often with regular intervals, 
facilitated the work of decipherment for the German crypt analytic service, 
The change of substitution tables resulted on the average after five 
to six phases [ cycles] . A conscientious code clerk changed more frequently 
and saw to it that the intervals were as irregular as posidble. 

The weakness of any code, even when there are ever so many variants 
for .frequent plain-text words or combinations, consists in the danger ttiat 
the v/ords occurring most frequently will be reflected in the cipher groups a 
It is a well known and a psychologically explicable fact that a few groups 
which are easily coumitted to memory will be given a preference* The 
encoder wants to save time and v««ites down from memory the familiar groups 
without looking them up in the code book* 

In a code which is refined by a system of cleverly conceived substitu- 
tion tables and hence is rendered far more complicated, the nunber of 
repetitions appearing in the cipher text - so-called "parallel passages" * 
lb materially less. To achieve an entry the unauthorized decipherer must have 
many times as much traffic as would normally be the case. The preliminary 
statistical work increases correspondingly in volume and become^ ^ore 
difficult and time consuming,, 



TOP SECRET 



TOP SECRET 



nevertheless, even *en ten different substitution tables are employed, 
it is possible to court on the occurrence of paral3*l passages (called 
.■crecodiles" in the cryptographic section) which are useful and important 
for solving the cryptogram. 

The likelihood is greatest when proper names occur. In a code of 
medium extent these are not represented by special cipher groups and must 
therefore be spelled out or at least broken up into groups of letters or 
syllables, if there are such in the code. The name "Rockefeller," for 
instance might be reproduced as follows: 

ROCK - E - FELL - KR, 
in other words, four plain-text words equal to four cipher groups,, If 
the same name occurs again, perhaps by accidmt in the same message and 
even in the same phase and enciphered by the same substitution table, 
then to get the so-called "parallel passage" in the cipher texto 

The same phenomenon occurs when names or designations of offices, 
institutions, ships, weapons, types of airplanes, and the like are 
involved which embrace several cipher groups* 

The creator of the code had also forseen this weakness and introduced 
the so-called "Repeater," i. e., repeater groups., Such a groip, placed 
after a word, signifies that in case of a repetition the whole series of 
cipher groups is not to appear again but only a single group which then 
automatically represents the entire word or the entire combination of words. 

The repeater groups ("Repeaters") were also represented by several code 
groups (variants) so as to avoid too frequent occurrence. The length of 
the repetitions, i. e., the number of cipher groups, was shown by special 
repeate r-group-families . 

These measures not only contributed to the security of the cryptographic 
system but also at the same time reduced the length of the telegram or the 
radiogram* 

In practical work, however, there is a type of repetitions which even 
a clever and experienced compiler of codes can hardly calculate and thus 
eliminate: these are the stereotyped expressions which occur over and over 
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**. clause *m « ***** -voidable. They constitute the ereateet 
weakness in the use of any code* 

The cryptanalyst, hoover, v-atches «tth *** every NWMM 

constellation: practically every break into a cede is due to then. 
Patience and w*eWUn«s are the suprer.* rule in the intarce,* end 
cryptanal-tic service. NoAere else does human inadequacy reveal itself 
as it does here. It is always a ouesticn of acting for the mistake 
that the enemy mil aake sobb d^; and he «J31 nake it am uay with 
absolute certainty,, 

It is true that the American Military Attache systems took this 
dangerous fact into account more arri nore as years wait on: however, the 
camouflage tactics were not perfect enough to prevent the German crypt- 
analytic service from making use of this chance . 

The messages enciphered with the "Intelligence Code" initially carried 
a statement of the originator and recipient at the message beginning, 
practically vithout a thought* frequently these involved seven or more 
cipher groups „ 

How did t.hese addresses and signatures become knovn? -All you could 
tell by looking at the enciphered messages v/as that the same names might 
be involved, nothing more„ 

One must bear in mind that for cryptanalytic work a many-sided store 
of information has to serve as a base. Harmless plain-text messages or 
newspaper reports may give the most valuable hints • A well -managed archive, 
equipped in the most up-to-date fashion, renders invaluable service 0 Fr- 
are recorded with painstaking exactitude, and in a way which makes it 
possible to find them at a moment's notice, the names of all political 
and military personalities, a3 they become knowi; designations of offices, 
ships, weapons 5 data regarding treaties and agreements made; negotiation 
projected; political events; parliamentary debates; utterances of 
distinguished politicians; changes in cabinets or in military cormand3; 
accidents; special events; etc It must be possible to answer at once 
every cuesticn of the crypt analyst regarding anything which may have 
happened in any connection o 
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Or COU.SO. X.QR J&&GR&T *«. - to tha «n*- 
analyat to to* to ***** at the rO^ht p**, to d-»l«P a breaK- 

to ^icaHy, anu no b to Cavlate *» hte c«r». thou* this sonatas 

majy prove deceptive* 

Not every uell-founded assumption means a break-in; hard work is 
required to find final confutation and prove the correctness of an 
hypothesis, or to reject it agai* a«* .eel, a B** *e. «* 
cryptanalyst gets on the vvrong track In spite of the correct assumption 
and ia inclined to drop his plan if confirmation cannot be secured. 

All these happened in connection with the "Intelligence Cede," tooo 
Above all else a good pledge of the content of Military Attache traffic 
formed an important prerequisite for section of the cryptographic system. 
In this connection there v,as excellent proof of the validity of the 
thoroughness with tfhieh this traffic was monitored at the Lauf intercept 
station, Where the primary assent was copying this traffic. The system 
of reception control used there gave assurance that the traffic was picked 
up virtually without gaps* 

The labors which led to tie solution of the first set of substitution 
tables occupied several months. In the spring of 1%2 it was accomplished. 
Of course, it had been possible earlier to read a considerable portion of 
the messages, even though not in entirety. The talegrans raid wore somewhat 
old, to be sure, but their content v/as still of real value . 

The most important traffic was the Cairo- Washing ton link. The 
American Military Attache, Fellers, had good information vhich he <pt fr-jra 
British Headquarters in Sgypt. To the great delist of the German crypt- 
analytic service he ?;as extraordinarily talkative. By this trait he did 
the German decoders a two-fold favor. In the first place, the material 
they had to vork on becaoaB so abundant that the solution of the crypto- 
graphic systems was achieved much more quickly; in the second place, he 
supplied the German Hi#\ Command with excellent intelligence material; 
no better and nore dependable information could have been secured through 
agents or otter sources. Moreover, it was probably absolutely true 
because the Military Attache was giving his \'!ar Department, without any 
adornment or propagandistic intent, a sober picture of the situation on 
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the enemy eMe and an equal* «*er picture of the situation on the (hr*n 
side, 

Affcor the first set of substitution tables was solved, the ice was 
broken. The first completely deciphered message had been translated 
and passed on. The interest of the Gewan military command was extraordinar- 
ily great and grew from day to day. The only question, Which **S 
regularly along with laudatory commendation , v;as: 

"V/hen are we going to get the latest reports?" 

The work was carried on feverishly in several shifts but a solution 
cannot be forced in this manner. It grips all those participating in the 
w>rk, like an exciting novel, the end of which you want to reach quickly. 
But just as ycu have to work your way through a big fat book, it was 
necessary to mount from one stage to the next in order after occasional 
tarryings and short detours to arrive at last on the summit of the mountain. 

As everywhere, practice and familiarity with the code played an 
essential role here. The dead letters of a either group take on life, 
become people, tanks, infantry regiments, and friends or foes . The 
smaller ones among them, however, the prepositions "from" and "for," are 
of particular interest; they attend each person and each thing. The propsr 
names become especially dear when they are as long as possible and show 
characteristic qualities in their cipher groui s, e. g., when they extend 
over five or ;i>re cipher groups and, when in phase, have lite components 
in the groins such as: 

CBJEG and BOMAG. 

These cannot be disguised even by encimerment with substitution tables 
and become for the cryptanalyst precious things to be sought out. Often, 
even in the case of the Fellers messages, they guided the German crypt- 
analytic service to the proper path. 

The Cairo traffic was especially pleasing to the German crypt analysts 
in this respect. Every week the ships entering and leaving the Sue a canal 
were reported from Alexandria to V/ashington. These reports wore doubtless 
interesting and important for the German Navy and the German Air Force a 
And yet they were far mopj^y^nt g^h^ for they 
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were probably the weakest spot in the whole cryptographic system or - 
to state it more precisely - in the use of the system. V.'ith absolute cer- 
tainty those shipping reports appeared at the end of each week, rarely 
differing by a day. They contained almost the same warding or differed 
so sli^itly that a practiced eye - and a good crypt analyst must have one - 
could quicker fill in the remaining blank cells of the "cross-word puzzle." 

It may be mentioned in passing that the incoming and outgoing ships 
were often reported not rarely once but two or even three times, -'ith 
almost 100 percent certainty the incoming ships appeared the next weekend 
as outgoing. If they stayed longer than a week in the harbor of Alexandria, 
the German cryptanalytic service was prone to mark them down for the follow- 
ing Sunday j consequently, they knew the ships' names with wnich they would 
have to deals and thus the delay of a ship in the harbor of Alexandria 
repeatedly helped to clear up new cryptographic connections and to defeat 
the cryptographic system more and more. 

These reports were generally net long and therefore could readily be 
picked out among the five fco ten other messages receivod. An occasional 
xTong guess delayed success but did not chedk the work in any essential 
way. 

It would take us too far afield to explain here the details of the 
methodic procedure; we shall only say that the utmost exactitude and the 
most precise graduation of a new system according to its probability were 
the most significant conditions for preventing a laboriously constructed 
hypothesis from finally crumbling into ruin. 

Errors of the operator or of the intercept operator often played a 
decisive role. If, for example, a cipher group had been omitted, then 
the picture changed radically and led to mis interpretations. If the 
operator who received the nossage or the clerk vjho copisd it off the 
tape carelessly left cut a group, read it off incorrectly, or merely 
confused single letters, then it was all up with the correct interpretation. 
There were also other sources of error: Atmospheric or technical dis- 
turbances prevented good reception, even if the operator was ever so 
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capable. Ho, often it ha^ned that precisely the irt important messages, 
which one had been waiting for longingly, arrived horribly garbled. 
Althou^ time was pressing, nevertheless it me necessary a;;ain and again 
to exercise the greatest patience. 

Experience and routine, in conjunction with an exactly functioning 
intellect and a lucky hand, always caw to the aid of the cryptanalyst 
in the long run. If the first substitution table required perhaps a week 
for complete solution, the same work could be accomplished in a third or a 
quarter of the time when the conditions were favorable. In any event, 
the shipping messages from Alexandria could not hare been arranged rore 
thoughtfully or better for the success of the German crypt analytic work. 
At the time when the German Afrika Korps was preparing for the last great 
offensive, which ultimately got to El Alamsin, the German c ryptanaly tic 
service was able to supply Rommel itith information of the very highest 
value. All the cryptanalysts who had worked on the solution of this system 
regarded this success as a reward for the months of labor and for their 
persistence during the alternate ups and downs of the initial successes. 
The solution of the substitution tables hr.d to be achieved viith the utmost 
speed if the reports were to be of real value. 

In the weeks preceding './hitsuntide 1942 it became clear that a unique 
opportunity had been given the Geman cryptanalytic service. The technical 
organization had become splendidly adjusted. The best intercept operators 
were sitting at their instruments in Lauf near Nuernberg and in Treuenbrietzen 
near Berlin; a select group working clay and night shifts had been assigned 
primarily to intercept the Cairo traffic. All frequencies on which this 
traffic was sent were known so that one need hardly reckon with the loss of 
messages. 

As a check, all messages were intercepted tv;ice if additional equiprent 
was available. As soon as an operator recognised the familiar address of 
the telegram, the cryptanalytic section in Berlin was notified. The nunbor 
of groups could be lea road from the message heading. Not infrequently 
actual tape messages were transmitted v^hich were forwarded in single parts 
by special massangcsrjto^sjr^^ Thus it happened that 
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before the last part ted been copied off the receiver taps the first had 
already ,rogressed to a point «here rou* outlines of the content could 

already be recognized. 

Each message i». "prepared" rationally so that several analysts cculd 
rork on it simultaneously. It «*S essential to rococo the starting point 
for new encipher rant tables; then the rest car* automatically , The 
fragments gave a kaleidoscopic picture of sentences, frequently of only 
part of sentences or single words, among vMch repeater groups and the like 
v;ere scattered. Ultinately, tot/ever, it all pieced together like a mosaic 
to give a conplete picture. Groups which had been wrongly intercepted or 
garbled in sending and cade no sense were checked and figured out. Rarely 
was a gap left open. The translator dictated the completed messages to 
the machine at once; in an hour or less a report could start on its way 
to Africa through the same aether througi which it had corns. 

In the decisive days vfcen the German Afrika Korps was beginning its 
last drive to the East, which seemingly promised to be successful, the 
Gernsn cryptanalytic service was able for weeks to lay before Roraiel the 
sane very realistic reports just as quickly and perhaps even tuore quickly 
than they were transmitted to the Chief of the Anerican General Staff 
in 'Tashington by his Military Attache, Colonel Fellers, in Cairo o 
Messages containing errors due to the code clerk in Cairo could be read 
by the Garr^an analysts after the errors had boon recognised. 3y the tiue 
that 'Washington's queries and requests for a repetition uere cn their way 
through the aether, the deciphered telegram v;as already in Rommel's 
possession. 

It gave the German crypt analysts special delight when thqy could 
outstrip the code c3eark in V/ashington, who worked mechanically. Sometimes 
they would have been glad to help him out a little. 

Nevertheless, among the Geriian crypt analysts there ;ias always a 
certain concern. .«hen would X-Day come, the day tfien the old set of 
substitution tables would be replaced? That it would come soon after the 
great offensive was clear; and yet tha German decoders worrier^ at the 
Anerican lack of concern^^d^ no^ gs^^o^cj^mch sooner. 
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Faultily enciphered telesrams were often looted upon as the signal, but 
in every case they turned out to be merely a mistake . 

The Geraan crypt analytic organisation was as well prepared as 
poBsible for the day of the chance. Oirls who voted swiftly and cleverly 
on statistics sat ready to enter in fat volume* the hundreds of apparently 
lifeless cipher groups, to arrant them oystenatioallor, and to assign 
each group to the proper souare. Erroneously copied grou s oould easily 
d) nore harn than good and correcting was mere difficult than entering. 

The first parallel passage laid the foundation for the r.ew structure. 
Characteristic weaknesses, for which the authorized encodes or Mr. Pollers 
wire personally responsible, contributed their share to £©t the new sot 
of substitution tables {ping in the shortest possible tine even in these 
decisive weeks. The previously mentioned shipping reports fron Port Said 
and the Sues Canal proved loyal helpers at this tine, too. The folders 
which had neanvhile become greatly swollen grew thinner. "Solved 
subsequently" was noted on the deciders d radiograna. They Met out 
along with those which were up-to-date and of prims priority. 

A layman mi^it havo been surprised at this mixture of dates and hit 
upon the idea that some office had been napping for a tiue. The sober 
notation "Solved subsequently" was intended to give an explanation and 
tell those rho did not understand why the most recent reports had felled 
to come, that reports of this kind could not be produced by machine 
wet hod a but called for the ncet strenuous mental toil. 

After the solution of the new substitution tables wee af ain well 
underway, reports could be deciphered which had the sent hitf, military 
value as before until that celebrated compromise through a radio pl^ 
on the German broadcasting station occurred, hereupon the entire code 
was re pieced. 

Details residing the declared telegrams will be Qjbren in a later 
re]«rt. 
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